CVE-2026-90105

Source
https://cve.org/CVERecord?id=CVE-2026-90105
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90105.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90105
Downstream
AZL (1)
BELL (1)
CLSA (2)
DEBIAN (1)
openSUSE (1)
UBUNTU (1)
Related
Published
2026-09-17T16:06:14Z
Modified
2026-10-31T02:47:54Z
Summary
vxlan: fix reading neigh ha
Details

In the Linux kernel, the following vulnerability has been resolved:

vxlan: fix reading neigh ha

Currently arp/neigh_reduce read neigh ha directly which can lead to partial reads while the neigh is being updated. Use neigh_ha_snapshot to take a stable snapshot of the address similar to route_shortcircuit which already does the right thing.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90105.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e4f67addf158f98f8197e08974966b18480dc751
Fixed
a1e86c5b4463178751a9fd3f0a3876a602dc360c
Fixed
6093baf2b2c57e7da33bacd2223570a78b416d89
Fixed
751cb520f9e47538b7223df133806a29fc41f54f
Fixed
f43ef9a3f9c121472a0754c9e9bff13317ace0f7
Fixed
ecc8bac11a101e5f6989a14b92e17b51f9761630
Fixed
b824059a673b2283e78c7aae2c7d257aad7f0e1d

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90105.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.8.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90105.json"